Effective date: 17 October 2026
Privacy Policy
How Saadfreeh Transport Est. handles personal and operational information in Fleet Manager.
Policy sections
Who operates the service
The service is operated for Saadfreeh Transport Est. (“the Company”, “we”, “us”). Company details shown in the app are managed in Settings. For privacy requests or questions, contact saad@saadfreeh.com or the Company administrator.
Scope and applicability
This policy covers the Fleet Manager web application, its APIs, account access, operational records, reports, and connected Excel/OneDrive features. The Company acts as the controller for information it enters or manages in the service. Microsoft OneDrive, email, hosting, database, and analytics providers process information under their own terms as applicable.
Information the application handles
- Account details: name, email, password hash, phone, department, job title, biography, profile image, role, permissions, account approval and verification status, and account recovery/verification data.
- Fleet, workshop, and purchasing records: truck and trailer identifiers, VINs, drivers, mileage, status, maintenance history, oil changes, tire issue quantities and serials, mechanics, job-card details, vendor names and contact details, invoice numbers and dates, expense categories, amounts, VAT and fleet/vendor ledger entries, notes, costs, attachments or signatures when supplied, and generated reports.
- Security and audit information: sign-in history, activity and audit entries, actions and record changes, IP address, user agent, browser, operating system, device type, and approximate location derived from IP when available.
- Connected workbook information: Microsoft account email and an encrypted OneDrive refresh token, workbook identifiers/links, sync status, and staged Excel changes.
- Usage and performance information: page and interaction telemetry from Vercel Analytics/Speed Insights and Microsoft Clarity. The current Clarity integration identifies signed-in sessions with the app user ID and sends the user role, email, and name as session metadata. There is currently no in-app analytics opt-out control.
- Information you send to support, and delivery information needed for account verification, password recovery, and enabled notification emails.
Why information is used
- To create and secure accounts, authenticate users, apply role and user-specific permissions, approve access, and recover accounts.
- To manage fleet assets, service history, job cards, tire and oil records, vendor invoices, vehicle expense accounts, input VAT, reports, and Excel synchronization requested by the Company.
- To display in-app maintenance notifications, send configured operational emails, investigate errors, maintain audit trails, and support users.
- To monitor application reliability, performance, and usage and to improve the service.
Job-card share links and exports
A job-card share link is a bearer link: anyone who obtains the link can view the shared job card without signing in. It may display the job number, truck or trailer details, VIN or plate, driver and technician names, work description, checklist, notes, and signatures saved on that card. Only share it with intended recipients. Downloaded PDFs, reports, and workbook exports can contain the same kinds of business or personal information; protect them when storing or forwarding.
OneDrive and workbook synchronization
When an administrator connects OneDrive, the user grants the app Microsoft Graph delegated access to the selected account’s files for the workbook integration. The app reads and writes the fleet workbook and stores the refresh token encrypted on the server. Workbook edits are staged for permission-checked review before changing app records; app data may be written back to the connected workbook. Microsoft account and workbook data are also subject to Microsoft’s terms and privacy information.
Storage and international processing
Fleet Manager uses a PostgreSQL database and external cloud services. The current production database connection is configured for a US East region; service providers may process data in other locations depending on their infrastructure and the connected Microsoft account. Information may therefore be processed outside Saudi Arabia. The Company is responsible for applying the safeguards and transfer requirements that apply under Saudi Arabia’s Personal Data Protection Law and its transfer regulations.
Retention and deletion
The Company retains information while it is needed to operate accounts, maintain fleet and workshop history, meet business and legal obligations, protect the service, and resolve disputes. Some records are soft-deleted or retained in audit history, and backup copies may remain until the applicable backup cycle expires. The application does not publish one fixed retention period for every record type. Contact the Company to request review, correction, or deletion; statutory duties and operational record requirements may limit deletion.
Your choices and privacy requests
You can correct profile information available in your account and ask the Company to access, provide, correct, complete, update, or destroy personal data, or to address consent where consent is the applicable basis. Requests are handled subject to identity verification, applicable law, and its exceptions. Contact saad@saadfreeh.com or the Company administrator and identify the account and request; do not include a password or access token.
Security
The application uses authentication, role-based access checks, audit logging, and encrypted storage for the OneDrive refresh token. Passwords are stored as hashes. No internet service can guarantee absolute security. Keep credentials private, use only authorized accounts, and report suspected unauthorized access promptly to the Company administrator.
Updates and contact
This business application is intended for authorized workforce use, not for children. The Company may update this policy when the service or its data handling changes; the in-app “Last updated” date identifies the current version. For questions or privacy requests, contact saad@saadfreeh.com.
Saudi privacy-law references
This policy is intended to describe the application’s current behavior and does not replace legal advice or the Company’s responsibilities under applicable law. See the official Saudi Personal Data Protection Law and the Regulation on Personal Data Transfer Outside the Kingdom for the legal framework.